CVE-2020-0610: vulnerability in Microsoft Windows Server
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
57Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.
ssvc Actepss 68%
from disclosure to weapon9 days
Published on NVDJan 14
1st PoC+9d
VulnCheckJan 14
A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0609.
Affected products
Microsoft · Windows Serverpublic PoCs found — 7
exploitdbwww.exploit-db.com/exploits/47964unverifiedexploitdbwww.exploit-db.com/exploits/47963unverifiedgithubgithub.com/ImBIOS/lab-cve-2020-0610★ 2vulncheckvulncheck.com/xdb/0eafd2c06bd6unverifiedvulncheckvulncheck.com/xdb/3a3f10478ff3unverifiedvulncheckvulncheck.com/xdb/8c5dd0de55c9unverifiedvulncheckvulncheck.com/xdb/92dfbbfeefd5unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Microsoft Windows Server
In the same product, most dangerous first.